Business Continuity Management System Part 2

Which of the following is a key objective of a BCMS?

• To prevent all disruptions to business operations

• To recover from disruptions quickly and efficiently

• To eliminate all risks to the organization

• To maximize profits during disruptions

Which of the following is an example of a preventive control in a BCMS?

• Backup and recovery procedures

• Incident response plan

• Access controls

• Crisis communication plan

Which of the following is an example of a corrective control in a BCMS?

• Business impact analysis

• Risk assessment

• Root cause analysis

• Incident response plan

Which of the following is not a phase of the Business Continuity Management Lifecycle

• Response

• Recovery

• Risk transfer

• Preparedness

Which of the following is not a type of risk in a business continuity context

• Operational risk

• Financial risk

• Reputation risk

• Technological risk

Answer explanation

Financial risk is not typically considered a type of risk in the context of business continuity because it refers specifically to the potential financial losses or impacts associated with a business disruption. While financial impacts are certainly an important consideration in business continuity planning, they are typically viewed as a consequence of other types of risks, such as operational, technological, or natural hazards.

Which of the following is not a key objective of a business impact analysis (BIA)?

• Identifying critical business functions

• Assessing the financial impact of a disruption

• Identifying recovery time objectives (RTOs)

• Identifying recovery point objectives (RPOs)

Which of the following is an example of a crisis management team role?

• Recovery coordinator

• Human resources coordinator

• Marketing coordinator

• Financial coordinator

Which of the following is an example of a recovery strategy?

• Risk acceptance

• Risk avoidance

• Risk transfer

• Risk mitigation

What is the purpose of a crisis communication plan?

• To identify critical business functions

• To assess financial impacts of a disruption

• To manage communication during a crisis

• To develop recovery strategies

What is the purpose of a recovery time objective (RTO)?

• To identify critical business functions

• To assess financial impacts of a disruption

• To set a target time for restoring operations

• To prioritize recovery efforts